Claroty

Nearly 1 in 5 data center CPS assets are one hop away from systems making outbound connections that could provide attackers a pathway to those assets.

40% of building management systems in data centers contain outdated firmware.

Power distribution units in data centers are 41% directly exposed or one hop away from risky connections to the public internet, while HVAC/cooling systems are 32% in the same condition.

The top Russian-targeted EU countries in the last 12 months were Italy (18%), France (11%), and Spain (9%).

71% of incidents carried out by Russia-affiliated groups target organizations in European Union countries.

66% of CPS incidents include the compromise of human-machine interfaces (HMI) or supervisory control and data acquisition (SCADA) systems that control industrial processes.

75% of organisations have BMS affected by known exploited vulnerabilities (KEVs).

Within organisations affected by KEVS that are also linked to ransomware and are insecurely connected to the internet, 2% of devices contain the same high level of risk, meaning they are essential to business operations and are operating at the highest level of risk exposure

Of the organisations affected by KEVs, 51% are affected by KEVs that are also linked to ransomware and are insecurely connected to the internet.

9% of IoMT devices contain confirmed KEVs in their systems, impacting 99% of organisations.

89% of healthcare organisations have the top 1% of riskiest IoMT devices on their networks, which contain known exploitable vulnerabilities (KEVs) linked to active ransomware campaigns and an insecure connection to the internet.

8% of imaging systems (X-rays, CT scans, MRI, ultrasound, and more) have KEVs linked to ransomware and insecure internet connectivity, making this the riskiest medical device category and impacting 85% of organisations.

More than 80% of OT control systems, power monitoring systems, and IoT systems in data centers communicate over legacy, insecure protocols such as BACnet and MODBUS.

88% of building management systems in data centers are exposed via communication over insecure protocols.

23% of IoT devices in data centers contain known exploited vulnerabilities (KEVs).

81% of incidents carried out by Iran-affiliated groups target organizations in the U.S. and Israel.

82% of attacks against cyber-physical systems involve using Virtual Network Computing (VNC) protocol clients to remotely access exposed internet-facing assets.

1% of IoMT devices carry KEVs linked to active ransomware campaigns and insecure internet connectivity, impacting 89% of organisations.

20% of HIS (hospital information systems), which manage clinical patient data, as well as administrative and financial information, have KEVs linked to ransomware and insecure internet connectivity, impacting 58% of organisations